Function parseJwtClaims

src/node/utils/codexOauthAuth.ts:63–76

(token: string)

 * Best-effort JWT claim decoding (no signature verification).
 */
export function parseJwtClaims(token: string): Record<string, unknown> | null {
  const parts = token.split(".");
  if (parts.length !== 3) {
    return null;
  }

  try {
    const json = Buffer.from(parts[1], "base64url").toString("utf-8");
    const parsed = JSON.parse(json) as unknown;
    return isPlainObject(parsed) ? parsed : null;
  } catch {
    return null;
  }
}

export function extractAccountIdFromClaims(claims: Record<string, unknown>): string | null {
  // OpenCode guide extraction order: